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DESCRIPTION 

Title of Invention 

DEVICE AND METHOD FOR RECORDING, REPRODUCING AND PROCESSING DATA 



Technical Field 

10 The present invention relates to a recording medium 

that stores a content (a digital production with copyright) 
such as music, a device that records a content onto a 
recording medium, a device that plays a content recorded on 
a recording medium, a device that produces a package by 

15 packaging a plurality of contents, a computer-readable 

recording medium, a recording method, a playback method, and 
a packaging method. 

Background Art 

20 First Background Technology 

Recently, a great deal of discussion has taken place 
between major music companies, audio device manufacturers, 
and intellectuals about a next-generation format for 
distributing copyrighted music. At present, all forms of 

25 music, whether pop, rock, or classical, are sold having been 

recorded on a recording medium such as a CD (Compact Disc) 
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or a magnetic tape. This method whereby consumers obtain 
recorded music by buying a recording medium is commonplace 
throughout the world. 

Much attention is currently being focused on 
5 electronic music distribution as an alternative to 

conventional forms of distribution that use a recording 
medium. Electronic music distribution refers to the fee- 
based delivery of a music "content" via the ever-expanding 
Internet. Here, a "content" refers to a copyrighted 

10 production in a digital form, so that a "music content" is 

music in a digital form. One characteristic of this 
electronic music distribution is that music contents can be 
ordered and paid for using electronic commerce. In detail, 
music companies can introduce a variety of music contents on 

15 their home pages, so that consumers can browse a variety of 

music contents by accessing the home pages of the music 
companies. On finding a desired music content, the 
consumer sends the necessary information, such as an order 
for the music content and a user ID, to a music company that 

20 runs the home page, and the music company charges the 

consumer for the music content via a bank account 
corresponding to a credit card number that the user has 
registered in advance. After the consumer has been charged, 
the consumer downloads the music content into his computer. 

25 In this way, a consumer can obtain a desired music content. 

Electronic music distribution allows the consumer to 
interactively select the music contents to be downloaded. 

2 
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This greatly facilitates the procedure by which consumers 
buy music and so can increase the sales of record companies. 
As one example, a record company can use a home page that 
introduces a popular new release to promote other related 
releases by the same artist and/or the same songwriter. 
Since there is a high probability of the consumer also being 
interested in these other releases, there is a good chance 
that the consumer will make further purchases. 

At present, however, the required infrastructure for 
electronic music distribution has not been fully 
implemented, so that consumers face various difficulties in 
buying music electronically. 

One fundamental requirement for the electronic 
distribution of music contents is the provision of high- 
speed communication lines that can transfer the several 
megabytes of data in a music content in a short time. At 
present, most users access the Internet via public networks 
whose transfer rate is totally insufficient for this 
purpose. This means that downloading a number of music 
contents via a public network takes a long time. When doing 
so, the consumer will incur a large communication cost that 
may even exceed the cost of the music contents. This 
naturally discourages consumers from purchasing music 
electronically, as does the long time the consumer has to 
wait. This can lead to consumers canceling a purchase while 
a content is still being downloaded. 

As with electronic music retailing, conventional 
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retail methods using a recording medium can promote releases 
related to a given product. This is traditionally done by 
printing promotional material and sales information for 
other releases on the jacket of a given product. If this 
promotional material succeeds in raising the interest of the 
consumer, the consumer may go on to purchase a separate 
recording medium that includes the related release by 
calling in at a record store. 

The retail price of music media is determined by 
various costs related to the manufacture and distribution of 
the media. This means that a consumer who purchases a 
recording media storing a new release and a recording medium 
storing related music has to pay for the relatively high 
costs of the manufacture and distribution of two recording 
medium. As stated above, consumers have to call in at a 
record store to buy the related releases. Since consumers 
who are interested in related releases cannot buy them 
instantaneously, there is the danger for record companies 
that such consumers will no longer want the releases by the 
time they go to the record store. 

Second Background Technology 

As described above, . music can be distributed in a 
variety of ways that include recording onto media and 
transmission via communication lines such as the Internet. 

Various recording media, such as DVD-Audio (Digital 
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Versatile Disc - Audio) discs and CDs, can be used to record 
music. In general, music recorded on different media is 
encoded in a different way. Music contents are also often 
distributed using a broadcast wave via a satellite, a CATV 
(community antenna television) cable, or the like. Such 
services are generally fee-based but in some cases music can 
be provided free of charge for promotional purposes. 

However, when distributing the same music using 
different methods, the music has to be encoded in a number 
of ways to produce a suitable music content for each 
distribution method for the following reason. Great 
differences regarding the provision (or lack) of copyright 
protection systems, the security of encryption keys, and 
playback performance exist among old and new playback 
devices, so that the generation and distribution of a single 
music content to every kind of playback device would prevent 
certain playback devices from using their copyright 
protection systems or making the most of their playback 
performance . 

If a music content is distributed to certain 
playback devices equipped with copyright protection systems, 
it may appear wise to encrypt all distributed forms of the 
music content with a secure encryption key. However, some 
music contents distributed in this way are samples that are 
only intended for promotional use and so are not encoded 
with a high quality. If these contents are also encrypted 
with a secure encryption key, playback devices that cannot 
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decrypt the contents will not be able to play the sample. 
This limits the promotional effect of providing samples to 
consumers . 

When a greater number of music contents need to be 
encoded using different encoding methods for the stated 
reasons, a supplier of contents is required to manage and 
distribute the contents with more caution to prevent these 
contents from being distributed to wrong destinations. For 
instance, if such a great number of music contents for sale 
should be mistakenly distributed instead of free promotional 
contents, this would cause significant damage to a content 
supplier. 

Disclosure of Invention 

The first object of the present invention is to 
provide a recording medium whereby a consumer who purchased 
a music content can obtain other related music contents in a 
convenient way at a low price. 

The second object of the present invention is to 
provide a content packaging device that can transmit music 
contents to playback devices of different types regardless 
of the provision (or lack) of copyright protection system, 
the security of encryption keys, and playback performance of 
the playback devices. 

The first object can be achieved by a recording 
medium that stores: a first content; a second content that 
has been encrypted according to a first cryptosystem; and a 
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header that has been encrypted according to a second 
cryptosystem and contains a first key information for 
decrypting the second content, the header being attached to 
the second content, wherein the second cryptosystem is 
characterized by using a second key information for 
decryption, the second key information being provided to a 
predetermined device in advance. 

When the stated recording medium stores a new 
release as the first content and a related release as the 
second content, a consumer who purchased the first content 
in the recording medium is allowed to purchase the related 
release by decrypting the first and second cryptosystems . 
These cryptosystems can be decrypted by loading the 
recording medium into the predetermined device to obtain the 
second key information that decrypts the second cryptosystem 
and that is provided to the predetermined device in advance. 
Accordingly, the consumer who has the predetermined device 
does not need to download these contents via the 
communication network, which takes a long time, and can 
purchase the related release in a convenient way without 
calling in at a record shop. 

In addition, the consumer needs to pay cost of the 
manufacture and distribution of only one recording medium, 
and therefore a price of the second content can be set 
lower . 

It is necessary to prevent a content whose 
reproduction or recording onto another recording medium is 
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charged from being reproduced or recorded without a fee 
being charged. For this reason, it may appear wise to 
encrypt such content using an encryption algorithm of high 
security such as an algorithm using a public key, however 
decryption of an algorithm of high security involves high 
operation loads and a long decryption time, especially when 
the content is several megabytes. With the present 
invention, by storing a superdistribution content as the 
second content and by using a complex public key encryption 
algorithm as the second cryptosystem only to encrypt the 
header, a time taken to decrypt the second content becomes 
shorter than when the second content is encrypted according 
to the complex second cryptosystem. When the consumer 
decides to play or purchase the second content, the second 
content can be quickly decrypted using the decryption key 
information taken from the header and presented to the user. 
The time taken by this decryption should be far shorter than 
the time that taken to download the same content 
electronically. In this way, the present technique succeeds 
in allowing the consumer to quickly reproduce or purchase 
the superdistribution content. 

Here, the predetermined device may be capable of 
charging a fee, wherein the header may include use 
limitation information showing: whether reproduction of the 
second content is permitted; a number of times reproduction 
is permitted; whether recording of the second content onto 
another recording medium is permitted; and a number of times 
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recording is permitted, and fee information which shows, 
when reproduction of the second content is permitted, a fee 
to be charged by the predetermined device for the 
reproduction of the second content and when recording of the 
second content onto another recording medium is permitted, a 
fee to be charged by the predetermined device for the 
recording. 

With the stated construction, the present recording 
medium limits the numbers of times for reproduction of the 
second content and recording of the second content onto 
another recording medium to prevent the second content from 
being reproduced and recorded onto another medium. This 
allows manufacturers to stop people from copying the second 
content or from excessively reproducing the second content, 
which prevents reducing the artistic appeal of the second 
content . 

Here, the predetermined device may be capable of 
charging a fee, wherein the header may include use 
limitation information showing: whether reproduction of the 
second content is permitted; a period during which 
reproduction is permitted; whether recording of the second 
content onto another medium is permitted; and a period 
during which recording is permitted, and fee information 
which shows, when reproduction of the second content is 
permitted, a fee to be charged by the predetermined device 
for the reproduction of the second content and when 
recording of the second content onto another recording 
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medium is permitted, a fee to be charged by the 
predetermined device for the recording. 

With the stated structure, the second content can be 
reproduced and recorded onto another recording medium only 
5 during the periods shown by the use limitation information. 

This enables manufacturers to increase the value of the 
second content by offering it to users for only a limited 
period. 

The first object may be achieved by a digital data 

10 recording device that records digital data containing at 

least one content onto a recording medium, the digital data 
recording device including: a storage unit for storing at 
least one content to be recorded onto the recording medium; 
a selecting unit for selecting a content whose reproduction 

15 and/or recording onto another recording medium need to be 

charged as a superdistribution content; a first encrypting 
unit for encrypting the selected superdistribution content 
according to a first cryptosystem to prevent the 
superdistribution content from being reproduced and from 

20 being recorded onto another recording medium before a fee 

has been charged; a generating unit for generating a 
superdistribution header containing key information to 
decrypt the encrypted superdistribution content; a second 
encrypting unit for encrypting the generated 

25 superdistribution header according to a second cryptosystem 

that ensures higher security than the first cryptosystem and 
for attaching the encrypted superdistribution header to the 

10 
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encrypted superdistribution content; and a recording unit 
for recording the encrypted superdistribution content and 
the encrypted superdistribution header onto the recording 
medium. 

5 With the stated construction, the present digital 

data recording device selects , out of a plurality of 
contents to be recorded onto another recording medium, a 
content whose reproduction and recording onto another 
recording medium should be charged as a superdistribution 
10 content. The digital data recording device then encrypts 

the superdistribution content to prevent the 

superdistribution content from being reproduced or recorded 
onto another recording medium without a fee being charged. 
Since the superdistribution header containing the key 

15 information used by a dedicated device when the 

superdistribution content is reproduced or/and purchased is 
attached to the encrypted superdistribution content, a 
content provider can be paid each time the consumer plays 
. the superdistribution content or when the consumer records 

20 the superdistribution content onto another recording medium. 

The first object can be also achieved by a digital 
data recording device that records digital data containing a 
superdistribution content from a first recording medium onto 
a second recording medium, the superdistribution content 

25 having been encrypted to prevent recording of the 

superdistribution content onto another recording medium 
before the recording is charged, the digital data recording 

11 
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device including: a loading unit for loading one of the 
first recording medium and the second medium into the 
digital data recording device; a reading unit for reading, 
when the loaded recording medium is the first recording 
5 medium, the superdistribution content from the loaded first 

recording medium; a displaying unit for displaying a fee for 
the recording to a user; a receiving unit for receiving an 
input from the user; a decrypting unit for decrypting, if 
the received input indicates that the user agrees to pay the 

10 fee, the read superdistribution content; a charging unit for 

charging the user the fee if the received input indicates 
that the user agrees to pay the fee; and a recording unit 
for recording, when the loaded recording medium is the 
second recording medium, the decrypted superdistribution 

15 content onto the second recording medium. 

According to the above construction, only when the 
consumer agrees to the purchase of the superdistribution 
content on the first recording medium the consumer has 
bought, does the present digital data recording device 

20 charges the price of the superdistribution content . As the 

consumer does not need to download the superdistribution 
content via the communication network, the communications 
fee charged to the consumer can be minimized in a state 
where the required infrastructure for electronic music 

25 distribution has not been fully implemented, and so a 

transmission speed of a communication network is low. As a 
result, the superdistribution content can be sold with 

12 
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little cost involved. 

The first object can be also achieved by a playback 
device that reproduces digital data containing at least one 
superdistribution content written on a recording medium, the 
5 superdistribution content having been encrypted to prevent 

the superdistribution content from being reproduced before a 
fee is" charged, the playback device including: a loading 
unit for loading the recording medium into the playback 
device; a reading unit for reading the superdistribution 

10 content from the loaded recording medium; a displaying unit 

for displaying a reproduction fee to a user; a receiving 
unit for receiving an input from the user; a decrypting unit 
for decrypting, if the received input indicates that the 
user agrees to pay the reproduction fee, the read 

15 superdistribution content; a charging unit for charging the 

user the reproduction fee if the received input indicates 
that the user agrees to pay the reproduction fee; and a 
reproducing unit for reproducing the decrypted 
superdistribution content . 

20 With the present playback device, the charging unit 

charges the user the reproduction fee if the received input 
indicates that the user agrees to pay the reproduction fee. 
This allows the content provider to charge the user each 
time the superdistribution content is reproduced. 

25 The second object can be achieved by a content 

packaging device that produces a package containing a 
plurality of contents, the content packaging device 

13 
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including: an encoding unit for encoding, using different 
methods, a production to be distributed to generate a 
plurality of contents that each have a different 
reproduction quality; a grading unit for giving a grade to 
5 each of the generated contents according to a reproduction 

quality of the content; a table storing unit for storing a 
table containing a plurality of grades and a plurality of 
pairs, each pair consisting of an encryption key information 
and an encryption algorithm information and being associated 

10 with a different grade out of the grades given by the 

grading unit; an encrypting unit for referring to the table 
and encrypting each content given a grade using an 
encryption key and an encryption algorithm indicated by a 
pair associated with the grade; and a packaging unit for 

15 packaging the plurality of contents that have been encrypted 

to produce the package. 

With the stated construction, the content packaging 
device encodes, using different methods, a production to be 
distributed to generate the plurality of contents that each 

20 have a different reproduction quality. The content 

packaging device then packages the plurality of contents to 
produce a package. As a result, each target content 
playback device can select a content from the transmitted 
content package according to the hardware performance of the 

25 content playback device. Accordingly, a content provider 

can transmit contents of differing qualities without needing 
to consider the different reproduction conditions of target 

14 
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content playback devices with the copyrights of the contents 
being protected. 

The second object can be achieved by a content 
packaging device that produces a package containing a 
plurality of contents, the content packaging device 
including: an encoding unit for encoding, using different 
methods, a production to be distributed so that a part of 
the production is encrypted as a sample content and a 
remaining part of the production as a main content; a 
grading unit for giving a predetermined grade to the sample 
content and a higher grade to the main content; a table 
storing unit for storing a table containing the 
predetermined grade, the higher grade, and two pairs, each 
pair consisting of an encryption key information and an 
encryption algorithm information, one pair being associated 
with the predetermined grade, another pair being associated 
with the higher grade; an encrypting unit for encrypting, 
after referring to the table, the graded sample content 
using an encryption key and an encryption algorithm 
indicated by the pair and encrypting the graded main content 
using an encryption key and an encryption algorithm 
indicated by the other pair; and a packaging unit for 
packaging the encrypted sample content and the encrypted 
main content to produce the package. 

According to the stated content packaging device, a 
content package of a smaller size can be transmitted via 
each distribution method and recorded onto a recording 

15 
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medium such as a hard disk or a CD-ROM using smaller storage 
areas . 

Byjef Pescription of Drawings 
5 These and the other objects, advantages and features 

of the invention will become apparent from the following 
description thereof taken in conjunction with the 
accompanying drawings which illustrate a specific embodiment 
of the invention. 
10 In the drawings: 

FIG. 1A shows the external appearance of an 
Enhanced-CD; 

FIG. IB shows the data structure of the Enhanced-CD; 
FIG. 2A shows the external appearance of a DVD-Audio 



15 disc; 



disc; 



FIG. 2B shows a logical format of the DVD-Audio 



FIG. 3 shows a plastic case containing a retail 
recording medium; 
20 FIG. 4 shows the data structure of a container 6; 

FIG. 5 shows examples of purchase conditions 12; 

FIG. 6 shows how a retail content 3 and a 
superdistribution content 10 are distributed; 

FIGs. 7A-7D show states in which a superdistribution 
25 content is recorded from a retail recording medium 200 onto 

a purchased-copy recording medium 650; 

FIG. 8 shows an example of an interactive screen 

16 
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displayed using a playback control script 4 and still image 
data 5 by a playback device; 

FIG. 9 shows the construction of a digital data 
recording device 100 of the second embodiment; 

FIG. 10 is a flowchart showing the processing of the 
digital data recording device 100; 

FIG. 11 shows an internal structure of a digital 
data recording device 300 of the third embodiment; 

FIG. 12 is a flowchart showing the processing of an 
encoding unit 303 in the digital data recording device 300; 

FIG. 13 shows an internal structure of a digital 
data playback device 4 00 of the fourth embodiment; 

FIG. 14 is a flowchart showing the processing of an 
encoding unit 303 of the digital data playback device 4 00; 

FIG. 15 shows a variety of methods to distribute 
content packages according to the fifth embodiment; 

FIG. 16 shows internal constructions of a content 
packaging device 700 and content playback devices 801-809 
according to the fifth embodiment; 

FIG. 17A shows an example of a first correspondence 

table; 

FIG. 17B shows an example of a second correspondence 

table; 

FIG. 17C shows an example of a table stored in a 
hardware-grade/decryption correspondence table storage unit 
according to the fifth embodiment; 

FIG. 18 shows a content package packaged by a 

17 
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content packaging unit 709 according to the fifth 
embodiment ; 

FIG. 19 shows internal constructions of a content 
packaging device 700 and content playback devices 801-809 
according to the sixth embodiment; and 

FIG. 20 shows a content package packaged by a 
content packaging unit 709 according to the sixth 
embodiment . 

Best Mode for Carrying Out the Invention 

The following describes the recording media, 
playback devices, and recording devices of the present 
invention with reference to several embodiments. For ease 
of explanation, the recording media, the playback devices, 
and the recording devices will be explained separately using 
the first to sixth embodiments. 

First Embodiment 

The first embodiment describes a recording medium 
used in the retailing of music contents. Music contents for 
sale are called retail contents and are bought and sold 
having been recorded onto recording media called retail 
recording media. Two types of retail recording media are 
used in the present embodiment. The first is an Enhanced- 
CD, which is a disc made up of an inner region having the 
same physical structure as a CD such as Compact Disc-Digital 
Audio (CD-DA) and of an outer region having the same 

18 
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physical structure as a CD-ROM. An Enhanced-CD therefore 
functions as both a CD-DA and a CD-ROM. FIG. 1A shows the 
external appearance of an Enhanced-CD, and FIG. IB shows the 
data structure of the Enhanced-CD. As shown in FIGs. 1A and 
IB, the inner region of the Enhanced-CD is called a CD-DA 
area, and the outer region is called a CD-ROM area. In 
terms of function, the CD-DA area can be called a content 
area 1 as it stores a retail content 3, and the CD-ROM area 
can be called an added value area 2 as it stores data that 
adds values to the whole recording medium. This recording 
medium is a retail recording medium used to sell the retail 
content 3 stored in the content area 1. 

The second type of the recording medium used in the 
present embodiment is a DVD-Audio disc that stores the 
retail content 3. FIG. 2A shows the external appearance of 
the DVD-Audio disc, and FIG. 2B shows the logical format of 
the DVD-Audio disc. Although the DVD-Audio disc does not 
have a CD-DA area or a CD-ROM area like the Enhanced-CD 
disc, it stores a playback control script 4, still image 
data 5, and a container 6 as different files that can be 
accessed by a personal computer, and has the same functional 
data structure as the Enhanced-CD disc, which is to say, the 
DVD-Audio disc includes a content area 1 storing the retail 
content 3 and an added value area 2 storing data to add 
value to the whole recording medium. The major difference 
between the Enhanced-CD and the DVD-Audio disc is that the 
retail content 3 is recorded in the content area 1 of the 
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Enhanced-CD as it is, but is recorded in the content area 1 
of the DVD-Audio disc having been encrypted using 
identification information unique to this particular DVD- 
Audio disc. 

Each of these recording media is packaged in a 
plastic case along with printed inserts. FIG. 3 shows a 
plastic case specifically designed for packaging these 
recording media in the same way as a conventional music CD. 
When the retail content 3 in the content area is for music 
entitled "SONG", the title "SONG" and related images are 
printed on the jacket of the recording medium as shown in 
FIG. 3. 

As stated above, a content area 1 and an added value 
area 2 exist in both the Enhanced-CD and the DVD-Audio disc. 
The following explains stored contents of the added value 
area 2. The right-hand columns in FIGs. IB and 2B show the 
stored contents of the added value area 2. As shown in the 
figures, the added value area 2 stores the playback control 
script 4, the still image data 5, and the container 6. 

The playback control script 4 is information that 
describes what should be displayed on an interactive screen 
of a device when a recording medium of the present 
embodiment is loaded into the device. The playback control 
script 4 is written in a format such as MACROMEDIA DIRECTOR 
or HTML. MACROMEDIA DIRECTOR format is used to describe 
authoring procedures that can be interpreted by software 
running on MS-WINDOWS or MAC OS, while HTML is often used to 
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write an Web pages that are displayed by browsers. 

The still image data 5 is a static image to be 
displayed on the interactive screen of the device according 
to the playback control script 4 . 

A conventional Enhanced-CD stores a playback control 
script and still image data for displaying information, such 
as lyrics, or a promotional video of the retail content, or 
introduction of a fan club, or information on other new 
releases. However, the playback control script 4 and the 
still image data 5 in the present embodiment are for display 
not information on the retail content 3 but information that 
recommends purchase and playback of a different music 
content . 

For instance, if the retail content 3 is for a new 
release by a popular artist, the playback control script 4 
can display information to recommend purchase and playback 
of a past hit song by the same artist. From the following 
explanation, it will become clear what music content in 
particular is being introduced by the playback control 
script 4 . 

The following explains the container 6 in the added 
value area 2 contained in both the Enhanced-CD and the DVD- 
Audio disc of the present embodiment. FIG. 4 shows the 
construction of the container 6. As shown in the figure, 
the container 6 includes an encrypted header 7 and an 
encrypted content 8. The encrypted header 7 is a 
superdistribution header 9 that has been encrypted, and the 
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encrypted content 8 is a superdistribution content 10 that 
has been also encrypted. 

"Superdistribution" is the name of a method of 
distributing contents and that is advocated by Ryoichi Mori, 
Professor Emeritus at University of Tsukuba. In 
superdistribution, a predetermined superdistribution header 
is attached to a content to be distributed and sold. Such a 
superdistribution header contains creditor information 
indicating a creditor who is to be paid, and purchase 
information indicating purchase conditions. When a consumer 
uses this content, the consumer's device interprets the 
creditor information and the purchase information to create 
a use record. The consumer reimburses the creditor 
according to the use record. 

The superdistribution header 9 and the 
superdistribution content 10 are stored in the container 6 
with a premise that they are suited to superdistribution. 
It is this superdistribution content 10 that has been 
encrypted and stored in the container 6 that is recommended 
by the still image data 5 and the playback control script 4. 

As mentioned above, the superdistribution header 9 
indicates confidential information used for securely 
performing superdistribution, such as the creditor 
information and the purchase information, which need 
protection against fraudulent acts such as tampering. For 
this reason, the superdistribution header 9 in the present 
embodiment includes a data area that has been encrypted 

22 



WO 00/21087 PCT/JP99/05516 

according to a cryptosystem based on a public key encryption 
algorithm. Note that the whole superdistribution header 9 
may be encrypted instead, with this being the case for the 
following explanation. Widely used public key encryption 
5 systems include elliptic curve encryption systems and 

Rivest, Shamir, Adleman encryption (RSA) . Public key 
cryptosystems are highly secure, since data that has been 
encrypted with a public key can only be decrypted with a 
different key. The present embodiment uses a public key 
10 cryptosystem to encrypt the superdistribution header 9, but 

this public key cryptosystem is improved in that a 
decryption key for decrypting the encrypted 

superdistribution header 9 is provided to a dedicated device 
in advance and that the encrypted superdistribution header 9 

15 is decrypted when a retail recording medium is loaded into 

the dedicated device. In more detail, the dedicated device 
is connected to a communication network and charges the 
consumer a proper fee via the communication network when the 
superdistribution header 9 is decrypted and the dedicated 

20 device reproduces the superdistribution content 10 or 

records it onto another recording medium. This ensures that 
the consumer pays the copyright holder for using the 
superdistribution content 10. 

Note that when different superdistribution contents 

25 need to be recorded onto a single retail recording medium, a 

superdistribution header of each superdistribution content 
is encrypted with a different public key, while the 
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dedicated device decrypts these superdistribution headers 
with a common decryption key. Note that although a fee for 
playback and/or purchase of a superdistribution content is 
charged via a communication network in the present 
5 embodiment, such a fee may be charged by another device by 

transferring fee information onto another recording medium 
such as an IC card or a prepaid card and having the another 
device operate according to the IC card or the prepaid card. 
For the above construction, the decryption key for 

10 decrypting a superdistribution header is provided not on a 

retail recording medium but in the dedicated device. As a 
result, if a person who purchased the retail recording 
medium should try to decrypt the superdistribution header 9 
using an unauthorized device, it would be extremely 

15 difficult to decrypt the encrypted superdistribution header 

9. This is so because a decryption key for decrypting the 
superdistribution content 10 is contained in the 
superdistribution header 9. Such decryption key will be 
described more later. As a result, the decryption of the 

20 superdistribution content 10 becomes also very difficult, so 

that the superdistribution content 10 can be distributed 
securely. 

Note that no indication of the superdistribution 
content 10 is given on the jacket of the retail recording 
25 medium, as shown in FIG. 3. This is to prevent the consumer 

from thinking that the superdistribution content 10 is 
provided at no charge when he purchases the retail recording 
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medium storing the retail content 3. 

The following explains elements stored in the 
superdistribution header 9 with reference to FIG. 4. As 
shown in FIG. 4, the superdistribution header 9 contains a 
5 content ID 11, purchase conditions 12, and a decryption key 

13. 

The content ID 11 is identification information to 
distinguish the superdistribution content 10 from other 
contents. As the superdistribution content 10 is a music 

10 content, identification information such as an 

International Standard Recording Code (ISRC) is written as 
the content ID 11. The ISRC is ID information provided to 
each song and consists of a country code (two ASCII 
characters) , a recording year (one two-digit number) , and a 

15 serial number (one five-digit number) . 

The purchase conditions 12 are information about the 
conditions regarding the purchase of the superdistribution 
content 10. FIG. 5 shows an example of the purchase 
conditions 12. As shown in the right column of FIG. 5, the 

20 purchase conditions 12 indicate the following: "permitted 

number of plays"; "digital output permission"; "playback 
permission expiry time"; "playback permission expiry date"; 
and "fee information". 

The "permitted number of plays" is an integer 

25 indicating a limit on the number of times the 

superdistribution content 10 can be reproduced. 

The "digital output permission" indicates whether 
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the superdistribution content 10 is permitted to be output 
via a digital output terminal of the dedicated device if the 
dedicated device has such a terminal. If so, the "digital 
. output permission" also indicates the limit on the number of 
5 times for the digital output using an integer. 

The "playback permission expiry time" indicates an 
expiry time at which point the superdistribution content 10 
cannot be reproduced any more. 

The "playback permission expiry date" indicates a 

10 date on which the playback permission expires. After this 

expiry date, the superdistribution content 10 cannot be 
reproduced any more. 

The "fee information" indicates a fee charged when a 
consumer reproduces the superdistribution content 10 and a 

15 fee for the purchase of the superdistribution content 10. 

Note that the purchase fee is charged when the consumer 
records the superdistribution content 10 in the container 6 
onto another recording medium, and playback fee is charged on 
an as-used basis according to a number of times the consumer 

20 has reproduced the superdistribution content 10. In 

electronic commerce, this fee information is an application 
form with a signature for purchase, which is to say, a 
consumer who owns the retail recording medium applies for the 
purchase or playback of the superdistribution content 10 by 

25 having the dedicated device transmit the fee information 

along with a user (consumer) ID to a host computer at a 
billing office of the music company. The dedicated device 
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loaded with the retail recording medium performs the above 
transmission via the communication network. The billing 
office, which knows a credit card number of the user 
registered in advance, charges the consumer for the purchase 
or the playback by withdrawing the fee from a bank account 
corresponding to the credit card number of the user referring 
to the sent user ID. 

The decryption key 13 decrypts the encrypted content 
8 to generate the superdistribution content 10. The 
superdistribution content 10 is a music content in a format 
such as Linear Pulse Code Modulation (LPCM) , Advance Audio 
Coding (AAC) , or Digital Theater System (DTS) and is 
encrypted with a block cryptosystem. Block cryptosystems 
divide a content to be encrypted into blocks of a certain 
length, and encrypts the content in units of blocks. DES 
(data encryption standard) , where one block is 64-bit long, 
or RC5, where blocks have a variable length, are examples of 
block cryptosystems. In a block cryptosystem, the same key. 
is used for encryption and decryption, so that block 
cryptosystems have lower security than public key 
cryptosystems. However, with the present embodiment, the 
decryption key 13 used for decrypting the encrypted content 8 
is contained in the superdistribution header 9 that is itself 
encrypted with a public key cryptosystem of higher security. 
As a result, it is extremely difficult for an unauthorized 
user to decrypt the superdistribution content 10. 

As has been described, with the above construction of 
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the container 6, it is extremely difficult to decrypt the 
superdistribution header 9 and tamper with the fee 
information, as the purchase conditions 12 are contained in 
the superdistribution header 9 which has been encrypted using 
a public key to ensure high security. As stated above, the 
superdistribution header 9 is encrypted with complex public 
key encryption, and the superdistribution content 10 is 
encrypted via a simpler block encryption technique using the 
decryption key 13 given in the superdistribution header 9. 
When the consumer decides to play or purchase the 
superdistribution content 10, the superdistribution content 
10 can be quickly decrypted using the decryption key 13 taken 
from the superdistribution header 9 and presented to the 
user. The time taken by this decryption should be far 
shorter than the time that taken to download the same content 
electronically. In this way, the present technique succeeds 
in allowing the consumer to quickly reproduce or purchase the 
superdistribution content 10. 

The following describes management information on a 
superdistribution header and a superdistribution content. 
Although a retail content is managed by management 
information provided on a CD or a DVD-Audio disc storing the 
retail content so that such content will be recognized and 
reproduced as music by a CD player or a DVD-Audio disc 
player, a superdistribution content and a superdistribution 
header are not managed by such management information. This 
is to stop the CD player or the DVD-Audio disc player 
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recognizing the superdistribution content as music and 
reproducing the superdistribution content without decrypting 
it. In such case, the superdistribution content would be 
reproduced as noise. Accordingly, a superdistribution 
content and a superdistribution header are managed by unique 
management information to distinguish them from the retail 
content. This management information is used by the 
dedicated device to detect the start and the end of the 
recording areas of the superdistribution header and the 
superdistribution content on a recording medium when reading 
the superdistribution header and the superdistribution 
content from the recording medium. Here, note that the terms 
CD player and DVD-Audio disc player do not refer to the 
digital data playback device 400 that is described later. 

The following explains how the retail content 3 is 
distributed to a consumer and the superdistribution content 
10 is superdistributed to the consumer with reference to FIG. 
6. 

As. shown by arrow yl in FIG. 6, a digital data 
recording device 100 installed in a factory operated by the 
music company records the retail content 3, the playback 
control script 4, the still image data 5, and the container 6 
onto a retail recording medium 200. The retail recording 
medium 200 is then transported as shown by arrow y2 by truck, 
for instance, to a retail shop as in the distribution of a 
conventional CD so that a consumer can purchase the retail 
recording medium 200 at the retail shop as shown by arrow y3 . 
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The consumer who bought the retail recording medium 
200 plays the retail content 3 in the same manner as when 
playing a normal CD or on a DVD-Audio disc. For instance, 
the consumer may listen to the retail content 3 on a portable 
5 playback device while walking as shown by arrow y4 . 

Assume that the consumer who bought the retail 
recording medium 200 has a digital data recording device 300 
and a digital data playback device 400 in his house as the 
aforementioned dedicated devices connected to a communication 

10 network. The digital data recording device 300 records the 

superdistribution content 10 from the retail recording medium 
200 onto another recording medium with a fee being charged by 
the music company. The digital data playback device 4 00 
plays the superdistribution content 10 on the retail 

15 recording medium 200 , which is also charged. 

The playback control script 4 in the retail recording 
medium 200 has the digital data recording device 300 and the 
digital data playback device 4 00 display an interactive 
screen that contains the reproduced still image data 5. FIG. 

20 8 shows an example of the interactive screen. In FIG. 8, an 

image ml is an introductory image of the superdistribution 
content 10 , for instance, a photo of the band who plays a 
related release of the superdistribution content 10. A 
message m2 prompts the user to reproduce the 

25 superdistribution content 10, and buttons m3 and ml3 are used 

to designate positive and negative responses to the message 
m2. A playback fee m4 shows the reproduction fee of the 
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superdistribution content 10. A message m5 prompts the user 
to purchase the superdistribution content 10, and buttons m6 
and ml6 are used to designate positive and negative responses 
to the message m5. A purchase fee m7 shows a purchase price 
of the superdistribution content 10. This interactive screen 
allows a consumer to know about the superdistribution content 
10 in the retail recording medium 200, and if interested, the 
consumer can have the digital data playback device 400 
reproduce the superdistribution content 10 or purchase the 
superdistribution content 10 via the digital data recording 
device 300. When the consumer purchases or reproduces the 
superdistribution content 10, the digital data recording 
device 300 or the digital data playback device 400 transmits 
fee information indicating a fee for the purchase or the 
playback via a communication network 500 to a host computer 
600 installed in the billing office of the music company. 

F1GS.7A-7D show stages in which the digital recording 
device 300 records the superdistribution content 10 from the 
retail recording medium 200 onto another recording medium to 
purchase the superdistribution content 10. Hereafter, the 
recording medium onto which the superdistribution content 10 
is recorded to purchase it from a retail recording medium is 
called the purchased-copy recording medium. Here, assume 
that the purchased-copy recording medium is a DVD-RAM. 

As shown in FIG. 7A, when a user loads the retail 
recording medium 200 and the DVD-RAM 650 as a purchased-copy 
recording medium into the digital data recording device 300, 
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the digital recording device 300 records the 

superdistribution content 10 onto the DVD-RAM 650 as shown in 
FIG. 7B. When the user ejects the DVD-RAM 650 as shown in 
FIG. 7C, the purchase of the superdistribution content 10 is 
5 completed. To play the DVD-RAM 650, the user removes the 

DVD-RAM 650 from its cartridge and loads the DVD-RAM 650 into 
a DVD-RAM-compatible DVD-Audio player that can play both DVD- 
Audio discs and DVD-RAMs . 

Note that the digital recording device 300 may record 
10 the superdistribution content 10 onto a memory card, instead 

of a DVD-RAM. 

With the superdistribution explained in the present 
embodiment, a price of the superdistribution content 10 can 
be set lower than the retail price of the retail content 3. 

15 This is because the retail price of the retail content 3 

includes various distribution costs of an Enhanced-CD or a 
DVD-Audio disc such as a transportation cost, while the price 
of the superdistribution content 10 does not include any 
distribution cost as it can be purchased by merely decrypting 

20 the encryption. 

The present embodiment enables the user to purchase 
related contents in an interactive manner that resembles 
electronic commerce without using high speed communication 
lines that would be required for successful electronic 

25 distribution via the Internet, for example. 

Note that while an Enhanced-CD and a DVD-Audio disc 
are used as a recording medium to store a music content in 
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the present embodiment, a DVD-Audio disc of a hybrid type 
functions both as a DVD-Audio disc and as a DVD-ROM. 

This completes the description of a data structure 
suitable for the superdistribution, which is the first 
embodiment of the present invention. 

Second Embodiment 

The second embodiment relates to a digital data 
recording device 100 that produces a recording medium 
containing data in a format suited to superdistribution, 
FIG. 9 shows the digital data recording device 100 of the 
present embodiment. The digital data recording device 100 is 
achieved by installing a dedicated application program into a 
general-purpose personal computer, and comprises an input 
unit 101, a control unit 102, an encoding unit 103, a content 
storage unit 104, an obtaining unit 105, a superdistribution 
content encrypting unit 106, a superdistribution header 
encrypting unit 107, a retail content encrypting unit 108, a 
recording unit 109, and a unique information obtaining unit 
110. The digital data recording device 100 records a 
superdistribution content onto the retail recording medium 
200. 

Note that although the digital data recording device 
100 of the present embodiment records a music content onto a 
retail recording medium, data to be recorded onto a retail 
recording medium is not limited to this, that is, other data 
such as graphic data, character data, or combination of 
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graphic data and character data may be recorded onto the 
retail recording medium. 

The input unit 101 is connected to a pointing device 
such as a mouse or a keyboard and receives an instruction 
from an operator to encode a certain piece of music, to 
obtain a certain encoded data, etc. 

The control unit 102 interprets a request from the 
input unit 101 and instructs the encoding unit 103 to encode 
a piece of music or the obtaining unit 105 to obtain a music 
content stored in the content storage unit 104 . 

The encoding unit 103 encodes original music recorded 
on a master tape or the like and compresses the encoded music 
to generate a music content. For instance, the encoding unit 
103 generates digital data in LPCM format, and compresses the 
generated LPCM digital data to generate a music content in 
AAC format. After generating the music content, the encoding 
unit 103 generates the content ID, which has been described 
in the first embodiment, of the generated music content. 
Note that the digital data recording device 100 does not have 
to include the encoding unit 103 because such encoding may be 
performed beforehand, for instance, by a different device, 
and the music content that has been encoded can be stored in 
the content storage unit 104. 

The content storage unit 104 is a large-capacity hard 
disk device, which stores the music content encoded by the 
encoding unit 103 and its content ID. 

The obtaining unit 105 obtains a music content that 
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has been encoded and its content ID from the content storage 
unit 104 according to an instruction from the control unit 
102. 

The superdistribution content encrypting unit 106 
encrypts a superdistribution content. Here, assume that the 
digital data recording device 100 is to produce the retail 
recording medium 200 that has the same stored contents as 
shown in FIG. 1 or FIG. 2. In this case, the 
superdistribution content encrypting unit 106 encrypts the 
superdistribution content 10 using the decryption key 13 as 
an encryption key to generate the encrypted content 8. The 
setting of the decryption key 13 can be made arbitrarily by 
the operator. 

The superdistribution header encrypting unit 107 
generates the superdistribution header 9 by combining the 
purchase conditions 12 that the operator has written in a 
format suited to superdistribution, the content ID 11, and 
the decryption key 13. The superdistribution header 
encrypting unit 107 then encrypts the generated 
superdistribution header 9 to generate the encrypted header 
7, which it attaches to the encrypted content 8 to produce 
the container 6 . 

The unique information obtaining unit 110 obtains, if 
the retail recording medium 200 is a DVD-Audio disc and the 
retail content 3 needs to be encrypted based on 
identification information unique to the DVD-Audio disc, 
identification information that was recorded onto the DVD- 
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Audio disc when the DVD-Audio disc was manufactured. The 
unique information obtaining unit 110 then outputs the 
obtained identification information to the retail content 
encrypting unit 108. If the retail recording medium 200 is 
an Enhanced-CD, the retail content 3 does not need to be 
encrypted, and the processing of the unique information 
obtaining unit 115 is not performed. 

The retail content encrypting unit 108 encrypts the 
retail content 3 based on the obtained identification 
information unique to the DVD-Audio disc if the retail 
recording medium 200 is a DVD-Audio disc. If the retail 
recording medium 200 is an Enhanced-CD, the retail content 3 
does not need to be encrypted so that the retail content 
encrypting unit 108 does not encrypt the retail content 3. A 
cryptosystem based on identification information unique to a 
recording medium is disclosed by Japanese Laid-Open Patent 
Application No. 5-257816, and so that no detailed explanation 
of such will be given. 

The recording unit 109 records the container 6 
generated by the superdistribution header encrypting unit 107 
and the retail content 3 that may be encrypted by the retail 
content encrypting unit 108 onto the retail recording medium 
200. 

The following explains the processing of the digital 
data recording device 100 with reference to the flowchart of 
FIG. 10. The following explanation is provided assuming that 
original music has been already encoded and compressed as 
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music contents and that a plurality of such music contents 
are stored in the content storage unit 104. 

In step SI, after being activated, the control unit 
102 waits for a designation of a music content to be recorded 
onto the retail recording medium 200 out of the plurality of 
music contents in the content storage unit 104. If a music 
content has been designated, the control unit 102 waits for 
an instruction from the operator to record the designated 
music content onto the retail recording medium 200 either as 
a retail content or a superdistribution content in step S2. 
On receiving the instruction, the control unit 102 judges 
whether the received instruction indicates that the 
designated music content should be recorded as a retail 
content or a superdistribution content in step S3. 

Here, assume that the control unit 102 judges that 
the ^instruction indicates that the music content should be 
recorded as a retail content (the retail content 3) in step 
S3. As a result, the processing moves from step S3 to step 
S8, where the control unit 102 judges whether the retail 
recording medium 200 is a DVD-Audio disc or an Enhanced-CD. 
If the control unit 102 judges that the retail recording 
medium 200 is an Enhanced-CD, the processing moves from step 
S8 to step S6, where the control unit 102 instructs the 
obtaining unit 105 to obtain the designated music content 
from the content storage unit 104 and the recording unit 109 
to record it onto the retail recording medium 200. On the 
other hand, if the control unit 102 judges that the retail 
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recording medium 200 is a DVD-Audio disc in step S8, the 
processing moves to step S9, where the control unit 102 
instructs the obtaining unit 105 to obtain the designated 
music content from the content storage unit 104 and send it 
5 to the retail content encrypting unit 108. The retail 

content encrypting unit 108 then instructs the unique 
information obtaining unit 108 to obtain the unique 
identification information from the retail recording medium 
200. The processing then moves from step S9 to step S10, 

10 where the retail content encrypting unit 108 encrypts the 

retail content 3 using the obtained identification 
information as an encryption key, and then to step S6, where 
the recording unit 109 records the encrypted retail content 3 
onto the retail recording medium 200. The above processing 

15 in steps SI to S3, S8 to S10, and S6 results in the retail 

content 3 being recorded onto the retail recording medium 
200. The following explains the processing performed when 
the control unit 102 judges that the received instruction 
indicates that the designated music content should be 

20 recorded as a superdistribution content (the 

superdistribution content 10) in step S3. 

On judging that the designated music content should 
be recorded as a superdistribution content, the control unit 
102 instructs the obtaining unit 105 to obtain the music 

25 content and output the obtained music content 

(superdistribution content 10) to the superdistribution 
content encrypting unit 106 in step S3. In step S4, the 
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superdistribution content encrypting unit 106 encrypts the 
output superdistribution content 10 to generated the 
encrypted content 8 . 

In step S5, the control unit 102 instructs the 
superdistribution header encrypting unit 107 to combine the 
content ID 11, the purchase conditions 12, and the decryption 
key 13 and to encrypt the combination to generate encrypted 
header 7. The control unit 102 then attaches the encrypted 
header 7 to the encrypted content 8 to generate the container 
6. In step S6, the recording unit 109 records the container 
6 onto the retail recording medium 200. In step SI, the 
digital data recording device 100 asks the operator if 
recording should be terminated. If so, the processing shown 
in this flowchart is terminated, or if not, the processing 
moves from step S7 to step SI . 

As has been described, the digital data recording 
device 100 of the present embodiment selects, out of a 
plurality of music contents to be recorded onto the retail 
recording medium 200, a music content whose reproduction and 
recording onto another recording medium should be charged as 
a superdistribution content. The digital data recording 
device 100 then encrypts the superdistribution content to 
prevent the superdistribution content from being reproduced 
or recorded onto another recording medium without a fee being 
charged. 

Since the superdistribution header 9 containing the 
decryption key 13 and the fee information 12 used by the 
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dedicated device when the superdistribution content 10 is 
reproduced or/and purchased is attached to the encrypted 
superdistribution content 10, the music company can be paid 
each time the consumer plays the superdistribution content 10 
5 or when the consumer purchases the superdistribution content 

10. 

Third Embodiment 

The following explains the third embodiment. 

10 FIG, 11 shows an internal construction of a digital 

data recording device 300 of the third embodiment. The 
digital data recording device 300 is fundamentally the same 
as a digital data recording device used for the conventional 
electronic music distribution, and so has a download function 

15 for electronic music distribution to receive a music content 

via the Internet and to record the music content onto a 
purchased-copy recording medium with a fee being charged. 
More specifically, the digital data recording device 300 
includes a communication unit 313 for transferring data via 

20 the Internet and a billing unit 310 for charging a fee via 

the communication network when using electronic commerce . 
FIG. 11 is provided to functionally show the internal 
structure of the digital data recording device 300 related to 
the purchase of superdistribution contents. 

25 The digital data recording device 300 is achieved by 

a personal computer in which a dedicated application program 
has been installed and comprises an input unit 301, a display 
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unit 302, a control unit 303 f an obtaining unit 304 , a 
superdistribution header decrypting unit 305, a 
superdistribution content decrypting unit 306, a unique 
information obtaining unit 307, a superdistribution content 
re-encrypting unit 308, a recording unit 309, the billing 
unit 310, a fee information storage unit 312, the 
communication unit 313, and a record count management unit 
314. The following explanation assumes that the retail 
recording medium 200 has the stored contents shown in FIG. 1 
or FIG. 2 and that the purchased-copy recording medium 650 is 
a DVD-RAM. 

The input unit 301 is connected to a pointing device 
such as a mouse or a keyboard, and receives an instruction to 
purchase a certain superdistribution content from the user. 
Note that the "purchase" of a superdistribution content via 
the superdistribution can be achieved by recording data in 
the superdistribution content onto another recording medium 
or by outputting the data in the superdistribution content 
via a digital output terminal provided on a digital data 
recording or playback device. This latter case is possible 
since it enables the data in the superdistribution content 10 
to be recorded onto another recording medium loaded in 
another drive device. Here, note that the digital data 
recording device 300 is assumed to have such a digital output 
terminal to which a drive device, is connected as shown in 
FIG. 7A. 

The display unit 302 displays an interactive screen 
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based on the playback control script 4 and the still image 
data 5 which are recorded on the retail recording medium 200 
to visually provide the consumer with information on the 
superdistribution content 10 such as fees for playback and 
purchase of the superdistribution content 10. 

The control unit 303 interprets an instruction 
inputted via the input unit 301 from the user and instructs 
other functional units according to the instruction. For 
instance, on receiving the instruction from the user to 
purchase the superdistribution content 10, the control unit 
303 instructs the obtaining unit 304 to obtain the 
superdistribution content 10 and the superdistribution header 
9 from the retail recording medium 200. The control unit 313 
also controls the processing thereafter according to an 
output from another functional unit. 

The obtaining unit 304 obtains the container 6 from 
the retail recording medium 200. 

The superdistribution header decrypting unit 305 
decrypts the encrypted header 7 in the container 6 obtained 
by the obtaining unit 304 using a decryption key to obtain 
the superdistribution header 9. When the superdistribution 
header 9 is obtained, it becomes possible to show the user 
the purchase conditions 12. Here, the decryption key used to 
decrypt the encrypted header 7 may be contained beforehand in 
the application program installed in the digital data 
recording device 300 or may be transmitted from the billing 
office via a communication network. 
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After the superdistribution header decrypting unit 
305 decrypts the superdistribution header 9, the 
superdistribution content decrypting unit 306 decrypts the 
encrypted content 8 using the decryption key 13 contained in 
the superdistribution header 9. As a result, the 
superdistribution content 10 is obtained. 

The unique information obtaining unit 307 obtains 
identification information unique to the purchased-copy 
recording medium 650, which is a DVD-RAM. For a DVD-RAM, 
information written in a Burst Cutting Area (BCA) is used as 
the identification information on the DVD-RAM. Different 
identification information is recorded onto each DVD-RAM when 
the DVD-RAM is manufactured, and the identification 
information cannot be changed. When the superdistribution 
content 10 is encrypted using the identification information 
unique to a DVD-RAM as an encryption key, the decryption key 
for decrypting the superdistribution content 10 will also be 
based on the same identification information, and so if the 
encrypted superdistribution content should be copied from one 
DVD-RAM onto another, identification information will differ, 
preventing the copied superdistribution content from being 
decrypted. . As a result, the copyright of the 
superdistribution content 10 can be securely protected. 

Based on the identification information obtained by a 
unique information obtaining unit 307, the superdistribution 
content re-encrypting unit 308 encrypts the superdistribution 
content 10 that has been decrypted by the superdistribution 
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content decrypting unit 308. 

The recording unit 309 records the re-encrypted 
superdistribution content 10 onto the purchased-copy 
recording medium 650 and outputs a recording end notification 
to the billing unit 310. 

On receiving the recording end notification from the 
recording unit 309, the billing unit 310 reads the fee 
information from the purchase conditions 12 in the decrypted 
superdistribution header 9, and calculates a fee for the 
purchase based on the read fee information. The billing unit 
310 then inserts the calculated purchase fee into the read 
fee information. 

The fee information storage unit 312 is achieved by a 
hard disk in the personal computer, and stores the fee 
information containing the calculated fee. It is desirable 
that the fee information storage unit 312 stores the fee 
information is an encrypted state or stores the fee 
information in a "secure area" which cannot be accessed by a 
user through a standard processing to protect the fee 
information from being tampered with. 

The communication unit 313 includes a modem device 
connected to the communication network and software to 
control the modem device, and transmits the ID of the user 
and the fee information in the fee information storage unit 
312 to the host computer 600 installed in the billing office 
of the music company via the communication network with an 
appropriate timing. Here, the appropriate timing may be when 
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the fee reaches a predetermined amount, or when a 
predetermined day comes. It is of course possible to 
communicate with the host computer 600 each time the user 
records a superdistribution content onto the purchased-copy 

5 recording medium 650. 

The record count management unit 314 stores a number 
of times the recording unit 309 has recorded the 
superdistribution content 10 onto a purchased-copy recording 
medium 650 so far, and increments the number by one each time 

10 the recording unit 309 records the superdistribution content 

10 onto a purchased-copy recording medium 650. 

The following explains the processing of the digital 
data recording device 300 that has the above construction 
with reference to the flowchart of FIG 12. 

15 The processing of this flowchart starts when the 

retail recording medium 200 is loaded into the digital data 
recording device 300. In step S20, an input from the user 
requesting to introduce the superdistribution content 10 of 
the related music is awaited. On receiving such input, in 

20 step S21 the control unit 303 has the obtaining unit 304 read 

the playback control script 4 and the still image data 5 from 
the added value area 2 of the retail recording medium 200. 
The control unit 303 then has the display unit 302 display 
the interactive screen shown in FIG. 8. In step S22, an 

25 instruction from the user to purchase the superdistribution 

content 10 is awaited. If an input indicating that the user 
performs cancel operation is received, the processing is 
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terminated, or if the purchase instruction is received, the 
processing moves from step S22 to step S23, where the control 
unit 303 has the obtaining unit 304 obtains the container 6 
containing the encrypted header 9 from the retail recording 
medium 200. In step S24, the superdistribution header 
decrypting unit 305 decrypts the encrypted header 7 to obtain 
the superdistribution header 9. In step S25, the control 
unit 303 reads the number of times the recording unit 309 has 
recorded the superdistribution content 10 so far from the 
record count management unit 314. In step S26, the control 
unit 303 reads the limit on the number of times for digital 
output from the superdistribution header 9. In step S27, the 
control unit 303 judges whether the number of times read from 
the record count management unit 314 is lower than the read 
limit on the number of times. If not, the recording of the 
superdistribution content 10 is no longer permitted, and the 
processing of this flowchart is terminated. If so, the 
control unit 303 has the superdistribution content decrypting 
unit 306 decrypt the decrypted content 8 using the decryption 
key 13 in the superdistribution header 9 in step S28 to 
obtain the superdistribution content 10. 

After the decryption of the superdistribution content 
10, the control unit 303 has the unique information obtaining 
unit 307 obtain the identification information from the 
purchased-copy recording medium 650, and has the 
superdistribution content re-encrypting unit 308 encrypt the 
superdistribution content 10 using the obtained 
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identification information as an encryption key in step S29. 
In step S30, the control unit 303 has the recording unit 309 
record the re-encrypted superdistribution content 10 onto the 
purchased-copy recording medium 650. 

At the completion of the recording by the recording 
unit 309, the control unit 303 has the billing unit 310 read 
the fee information in the purchase conditions 12 from the 
superdistribution header 9 and calculate the fee for the 
purchase based on the read fee information. The control unit 
303 then has the billing unit 310 insert the calculated 
purchase fee into the read fee information and place the 
inserted fee information into the fee information storage 
unit 312 in step S31. In step S32, the control unit 303 
waits for an appropriate time to transmit the fee information 
stored in the fee information storage unit 312, and when such 
time is reached, the control unit 303 has the communication 
unit 313 obtain and transmit the fee information along with 
the ID of the user to the host computer 600 of the billing 
office in step S33. This completes the processing. 

As has been described, only when the consumer agrees 
to the purchase of the superdistribution content 10 in the 
retail recording medium 200 the consumer has bought, does the 
digital data recording device 300 record the 
superdistribution content 10 onto the purchased-copy 
recording medium 650 and transmit the fee information for the 
recording to the billing office via the communication 
network. As a consumer does not need to download the 
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superdistribution content 10 via the communication network, 
the communications fee charged to the consumer can be 
minimized in a state where the required infrastructure for 
electronic music distribution has not been fully implemented, 
5 and so a transmission speed of a communication network is 

low. As a result, the superdistribution content 10 can be 
sold with little cost involved. 

Fourth Embodiment 

10 The fourth embodiment relates to a digital data 

playback device 400 for reproducing a superdistribution 
content having been charged a fee. Unlike the digital data 
recording device 300 of the third embodiment that records the 
superdistribution content 10 from the retail recording medium 

15 onto another recording medium, the present digital data 

playback device 400 directly reproduces a superdistribution 
content from the retail recording medium 200, which is the 
major difference between the above two devices. Both devices 
have a function to download a music content via the Internet 

20 with the electronic music distribution and so include common 

functional units for performing such download. 

FIG. 13 shows the construction of the digital data 
playback device 400 of the present embodiment. In FIG. 13, 
the functional units common to the digital data recording 

25 device 300 and the digital data playback device 400 are given 

the same reference numbers as in FIG. 11, and will not be 
explained here. The following explains only the functional 
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units assigned reference numbers in the 400 that are unique 
to the digital data playback device 400. These are a 
playback unit 401 and a playback count management unit 402. 

The playback unit 401 reproduces the 
superdistribution content 10 that has been decrypted by the 
superdistribution content decrypting unit 306. On starting 
to reproduce the superdistribution content 10 , the playback 
unit 401 notifies the billing unit 310 of the start of the 
reproduction so that the billing unit 310 charges the user 
the reproduction fee. 

The playback count management unit 402 records a 
number of times the playback unit 4 01 has reproduced the 
superdistribution content 10, and increments the number by 
one for each reproduction by the playback unit 401. 

The following specifically explains the processing of 
the digital data playback device 4 00 with reference to the 
flowchart of FIG. 14. In this flowchart , steps S20 to S24, 
step S28, and steps S31 to S33 are the same as in FIG. 12 and 
so will not be explained. The following explanation focuses 
on steps S41 to S4 6 that are unique to the fourth embodiment - 

Following step S24 in which the encrypted header 7 is 
decrypted to obtain the superdistribution header 9, the 
control unit 303 reads the number of times the playback unit 
401 has reproduced the superdistribution content 10 from the 
playback count management unit 402 in step S41. In the same 
step, the control unit 303 reads the permitted number of 
plays from the superdistribution header 9. In step S42, the 
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control unit 303 judges whether the number of times read from 
the playback count management unit 4 02 is lower than the 
permitted number of plays. If not, which means that the 
reproduction is no longer permitted, the processing of this 
flowchart is terminated, or if so, the control unit 303 reads 
the present time and date in step S4 3 and the playback 
permission expiry time and date from the superdistribution 
header 9 in step S44. In step S45, the control unit 303 
judges whether the read present time has passed the read 
playback permission expiry time and the playback permission 
expiry date. If so, the processing of this flowchart is 
terminated, or if not, the processing moves from step S4 5 to 
step S28 in which the control unit 303 has the 
superdistribution content decrypting unit 30 6 decrypt the 
decrypted content 8 using the decryption key 13 to generate 
the superdistribution content 10. In step S4 6, the control 
unit 303 has the playback unit 401 reproduce the 
superdistribution content 10. 

With the digital data playback device 400 of the 
present embodiment, the playback unit 401 notifies to the 
billing unit 310 whenever it starts to reproduce the 
superdistribution content 10. This allows the music company 
to charge the consumer each time the superdistribution 
content 10 is reproduced. 

Note that the stated function to reproduce the 
superdistribution content 10 may be combined with the 
function to purchase the superdistribution content 10 
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described in the third embodiment to realize a digital data 
recording device in which these two functions are provided. 

Fifth Embodiment 

Although the first to the fourth embodiment have been 
described assuming that a music content is distributed using 
a recording medium, the present embodiment is described with 
a premise that a content is distributed using not only a 
recording medium but also the Internet or a broadcast wave of 
a satellite broadcast , a CATV cable,, or the like. 

FIG. 15 shows a variety of methods to distribute 
content packages produced by a content packaging device 700 
of the present embodiment. The content package contains a 
plurality of contents, and will be explained more later. As 
shown in FIG. 15, content packages are distributed via a DVD- 
Audio disc 701, a CD 702, the Internet 703, a CATV cable 704, 
and a communication satellite 705. Content playback devices 
801-809 are devices for reproducing a content package. The 
device 801 is a high-grade device dedicated to reproducing a 
content, and the devices 802 and 803 are low-grade dedicated 
device for a content. The devices 804 and 805 are dedicated 
portable devices for a content, and the devices 806 and 807 
are general-purpose personal computers equipped with hardware 
dedicated to the reproduction of a content. The devices 808 
and 8 09 are set-top boxes for receiving a broadcast wave via 
a communication satellite or a CATV cable. 

In this way, content packages are distributed to the 
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content playback devices of various types. Among the content 
playback devices 801-809, consumer devices such as the 
devices 801 and 802 include hardware dedicated to the 
decryption of an encrypted content, while the devices 806 and 
807 that are general-purpose personal computers do not 
include such dedicated hardware for decryption, and can only 
decrypt encrypted contents by running decryption software on 
general-purpose hardware. Accordingly, it is possible to 
regard the general-purpose personal computers 806 and 807 as 
not having a copyright protection system, and the consumer 
devices 801-805 as having such a system. This arrangement is 
used because consumer playback devices can reproduce contents 
at high quality, while a general-purpose personal computer 
can only reproduce contents at low quality. 

FIG. 16 shows internal constructions of the content 
packaging device 700 and the content playback devices 801-809 
according to the fifth embodiment. The content packaging 
device 700 includes a content encoding unit 706, a quality- 
grade/encryption correspondence table storage unit 7 07, a 
content encrypting unit 708, and a content packaging unit 
709. 

The content encoding unit 706 encodes a production to 
be distributed using different methods to generate a 
plurality of contents that each have a different reproduction 
quality but are based on the same production. Here, assume 
that the generated plurality of contents are a retail content 
710 and a sample content 711 that has a reproduction quality 

52 



WO 00/21087 



PCT/JP99/05516 



lower than the retail content 710. 

The content-grade/encryption correspondence table 
storage unit 707 stores a first correspondence table and a 
second correspondence table. The first correspondence table 
stores a plurality of pairs that each consist of a 
quantization bit number and a sampling frequency which are 
used by the content encoding unit 706 when encrypting the 
content, and stores a plurality of content grades assigned to 
each content that is generated as a result of the above 
encoding. In this table, each pair is associated with a 
different content grade. The second correspondence table 
stores the same content grades as the first correspondence 
table and a plurality of pairs that each consist of an 
encryption key bit number and an encryption algorithm name. 
Each content grade is associated with a different pair. 

FIG. 17A shows an example of the first correspondence 
table. As shown in the figure, Grade 1 is associated with a 
pair of 24 bits as the quantization bit number and 96 KHz as 
the sampling frequency, Grade 2 with 16 bits as the 
quantization bit number and 44.1 KHz as the sampling 
frequency, and Grade 3 with 16 bits as the quantization bit 
number and 22.05 KHz as the sampling frequency, wherein a 
lower grade number indicates a higher content grade. In this 
way, a pair of a higher quantization bit number and a higher 
sampling frequency is associated with a higher content grade. 

FIG. 17B shows an example of the second 
correspondence table. As shown in FIG. 17B, Grade 1 is 
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associated with a pair of a 1024-bit encryption key and the 
RSA encryption algorithm, Grade 2 with a pair of a 512-bit 
encryption key and the RSA encryption algorithm, and Grade 3 
with a pair of a 56-bit encryption key and the DES algorithm. 
5 Here, the RSA encryption algorithm is a public key system 

that provides higher security than the DES encryption 
algorithm which is a common key system. Encryption keys with 
higher bit numbers ensure higher security. In this way, a 
higher content grade is associated with an encryption key and 

10 an encryption algorithm that ensure higher security. 

The content encrypting unit 708 refers to the first 
correspondence table and assigns a content grade out of 
Grades 1-3 to each content encoded and generated by the 
content encoding unit 706. The content encrypting unit 708 

15 then refers to the second correspondence table and encrypts 

the content assigned a content grade using an encryption key 
and an encryption algorithm that are associated with the 
assigned content grade. For instance, when encrypting the 
retail content 710 that has been encoded by the content 

20 encoding unit 706 by quantizing at 24 bits and sampling at 96 

KHz, the content encrypting unit 708 refers to the first 
correspondence table and assigns Grade 1 to the retail 
content 710. The content encrypting unit 708 then refers to 
the second correspondence table, generates a 1024-bit 

25 encryption key (a session key) associated with Grade 1, and 

encrypts the retail content 710 using the generated 1024-bit 
encryption key and the RSA algorithm associated with Grade 1. 
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The content encrypting unit 708 then attaches the 1024-bit 
encryption key to the retail content 710 to which the above 
scrambling has been performed. 

On the other hand, when encrypting the sample content 
711 that has been encoded using a 16-bit quantization bit 
number and a 44.1-KHz sampling frequency by the content 
encoding unit 706, the content encrypting unit 708 assigns 
Grade 2 to the sample content 711, generates a 512-bit 
encryption key (a session key) associated with Grade 2, and 
encrypts the sample content 711 using the generated 512-bit 
encryption key and the RSA encryption algorithm associated 
with Grade 2. The content encrypting unit 7 08 then attaches 
the 512-bit encryption key to the sample content 711 for 
which the above scrambling has been performed. 

The content packaging unit 7 09 packages the retail 
content 710 and the sample content 711 that have been 
encrypted by the content encrypting unit 708 to generate a 
content package, and converts it into a form suitable for a 
distribution, method. More specifically, if the content 
package is to be distributed via the Internet, a satellite 
broadcast, or a CATV cable, the content packaging unit 7 09 
converts the content package into Transmission Control 
Protocol (TCP) packets or transport packets and outputs the 
generated packages. If the content package is to be 
distributed via a recording medium such as a CD-ROM or a DVD- 
ROM, the content packaging unit 7 09 converts the content 
package into a file in a Universal Disk Format (UDF) or the 
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like, and records the converted file onto a CD-ROM or a DVD- 
ROM. FIG. 18 shows an example of a content package that has 
been packaged, but not yet converted by the content packaging 
unit 709. As shown in the figure, the content package 
5 contains a plurality of contents and is distributed to the 

content playback devices 801-809. 

The following explains the content playback devices 
801-809. Although the content playback devices 801-809 have 
different overall constructions as shown in FIG. 15, these 

10 devices have common functional units shown in FIG. 16, that 

is, a hardware-grade/decryption correspondence table storage 
unit 810, a hardware performance evaluation unit 811, a 
content unpack unit 812, a content decrypting unit 813, a 
content storing unit 814, and a content playback unit 815. 

15 The hardware-grade/decryption correspondence table 

storage unit 810 stores a hardware-grade/decryption 
correspondence table that associates a plurality of hardware 
grades with a plurality of pairs that each consist of a 
decryption key bit number and a decryption algorithm name. 

20 Each hardware grade is associated with a different pair and 

indicates hardware performance of a content playback device. 

More specifically, each hardware grade in this table is 
determined by whether hardware dedicated to the decryption of 
an encrypted content, that is, a copyright protection system 

25 is provided to a content playback device, and if so, 

decryption capability of the copyright protection system. 
These hardware grades are expressed in descending order as 
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Grades A, B, and C. For instance, Grade A indicates that a 
copyright protection system is provided to a content playback 
device, and Grades B and C indicate that a copyright 
protection system is not provided to a content playback 
device. FIG. 17C shows the table stored in the hardware- 
grade/decryption correspondence table storage unit 810. In 
the table, Grade A is associated with a pair of a 1024-bit 
decryption key and the RSA decryption algorithm, Grade B with 
a pair of a 512-bit decryption key and the RSA decryption 
algorithm, and Grade C with a pair of a 56-bit decryption key 
and the DES decryption algorithm. 

The hardware performance evaluation unit 811 
evaluates hardware performance of the content playback device 
in which this unit is provided to calculate its grade by 
detecting whether the content playback device includes 
hardware dedicated to the decryption of an encrypted content 
and by calculating a memory size of the hardware that can be 
used for the decryption. 

The content unpack unit 812 receives a content 
package from the content packaging unit 700 and unpacks the 
content package to obtain the retail content 710 and the 
sample content 711. 

The content decrypting unit 813 refers to the 
hardware-grade/decryption correspondence table first and 
selects a decryption key and a decryption algorithm 
corresponding to the grade calculated by the hardware 
performance evaluation unit 811. Second, the content 
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decrypting unit 813 separates only a content that can be 
decrypted by the selected decryption key and decryption 
algorithm out of the contents unpacked by the content unpack 
unit 812. Third, the content decrypting unit 813 decrypts 
5 the separated content using the decryption key and the 

decryption algorithm. 

The following specifically explains decryption by the 
content decrypting unit 813 of the content playback device 
801 which is a high-grade consumer playback device. When the 

10 content playback device 801 has dedicated hardware for the 

decryption, the hardware performance evaluation unit 811 
assigns the playback device 801 a grade corresponding to 
Grade A in the table in the hardware-grade/decryption table 
storage unit 810. Following this, the content decrypting 

15 unit 813 refers to the table to select a pair associated with 

Grade A. As Grade A is associated with a pair of a 1024-bit 
decryption key and the RSA decryption algorithm, the content 
decrypting unit 813 selects this pair. After finding that 
the retail content 710 is encrypted by a 1024-bit encryption 

20 key and the RSA encryption algorithm, the content decrypting 

unit 813 separates only the retail content 710 from the 
contents unpacked by the content unpack unit 812. Following 
this, the content decrypting unit 813 decrypts the separated 
retail content 710 using the RSA decryption algorithm and the 

25 decryption key that has been provided in advance. 

On the other hand, if a playback device is the 
content playback device 806 which is a personal computer that 
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decrypts the content by running decryption software on 
general-purpose hardware, the hardware performance evaluation 
unit 811 assigns a grade corresponding to Grade C in the 
table in the hardware-grade/decryption table storage unit 
810. The content decrypting unit 813 then refers to the 
table to select a pair associated with Grade C. As Grade C 
is associated with a pair of a 56-bit decryption key and the 
DES decryption algorithm, the content decrypting unit 813 
selects this pair. After finding that the sample content 711 
is encrypted by a 56-bit encryption key and the DES 
encryption algorithm, the content decrypting unit 813 
separates only the sample content 711 from the contents 
unpacked by the content unpack unit 812. Following this, the 
content decrypting unit 813 extracts an encryption key 
attached to the sample content 711 from the content package 
to obtain the encryption key as a decryption key, which is 
possible because the DES algorithm is a common key system. 
The content decrypting unit 813 decrypts the separated sample 
content 711 using the extracted encryption key as the 
decryption key and the RSA decryption algorithm. 

The content storage unit 814 stores a content 
decrypted by the content decrypting unit 813. 

The content playback unit 815 reproduces the content 
that has been temporarily stored in the content storage unit 
814. 

As has been described, the content packaging device 
of the present embodiment generates the retail content 710 
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and the sample content 711, wherein the sample content 711 
has a reproduction quality lower than the retail content 710, 
and encrypts the retail content 710 and the sample content 
711 with different encryption methods having different 
5 security levels . The content packaging device then packages 

the retail content 710 and the sample content 711 as a 
content package and transmits the content package to content 
playback devices of different types. As a result, each 
content playback device can select a content from the 

10 transmitted content package according to the hardware 

performance of the content playback device. Accordingly, a 
content provider can transmit contents of differing qualities 
without needing to consider the different reproduction 
conditions of target content playback devices with the 

15 copyrights of the contents being protected. 

Sixth Embodiment 

The sixth embodiment relates to a content packaging 
device that is a modification of the content packaging device 

20 of the fifth embodiment. The major difference between the 

two lies in that the content encoding unit 706 in the present 
embodiment encodes the start of a production to be 
distributed to generate a sample content and the rest of the 
distribution subject to generate a main content. The content 

25 packaging unit 709 packages the encoded main content and 

sample content to produce a content package. 

FIG. 19 shows constructions of the content packaging 
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device 700 and content playback devices 801-809. 

The content encrypting unit 708 assigns a 
predetermined grade to the sample content and a grade higher 
than the predetermined grade to the main content. The 
content encrypting unit 708 then refers to a table similar to 
the second correspondence table of the fifth embodiment and 
encrypts the graded content using an encryption key and an 
encryption algorithm that are associated with the assigned 
grade. As stated above, the content packaging unit 709 then 
packages the encrypted main content and sample content to 
generate the content package. FIG. 20 shows the content 
package packaged by the content packaging unit 709 of the 
present embodiment . 

According to the present embodiment , a content 
package that has a smaller size than a content package in the 
fifth embodiment can be transmitted via each distribution 
method and recorded onto a recording medium such as a hard 
disk or a CD-ROM using smaller storage areas. 

Although the present invention has been described 
based on the first to sixth embodiments, these embodiments 
are only examples by which optimal effects of the invention 
can be obtained. The present invention therefore can be 
modified without changing its essence. The following 
describes modifications that are considered to be 
representative . 

(a) In the first to fourth embodiments, the purchased-copy 
recording medium 650 is described as an optical memory disc 
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such as a DVD-RAM, though the purchased-copy recording medium 
650 may alternatively be a hard disk or a semiconductor 
memory. 

(b) The third and the fourth embodiments state that the fee 
information storage unit 312 is achieved by a hard disk of a 
personal computer, though the fee information storage unit 
312 is not limited to such and may be achieved by a recording 
medium such as an IC (Integrated Circuit) card. 

(c) The digital data recording device 500 described in the 
first to fourth embodiments is described as being achieved by 
a personal computer used in the home, although the digital 
data recording device 500 may be installed in a shop such as 
a record shop. 

(d) Although the first to fourth embodiments have been 
described assuming that information distributed by a provider 
is a music content, the information to be distributed is not 
limited to' a music content. It is naturally possible to 
distribute an image content, text data, or a combination of 
an image content and text data. 

(e) In the fifth embodiment, the retail content 710 and the 
sample content 711, which are two types of contents having 
different reproduction qualities, are generated and 
distributed, although it is possible to generate and 
distribute three or more types of contents having different 
reproduction qualities. 

(f) The procedures described in the first to sixth 
embodiments such as those shown in the flowchart of FIGs. 10, 
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12 , and 14 may be written as programs in machine language and 
recorded onto a recording medium to be distributed and sold. 
Such a recording medium may be an IC card, an optical memory 
disc, a floppy disc, or the like. By installing the above 
5 programs into a general-purpose computer and by having the 

general-purpose computer execute the installed programs, 
functions of the digital data recording devices and the 
digital playback device of the present invention can be 
achieved. 

10 Although the present invention has been fully 

described by way of examples with reference to accompanying 
drawings, it is to be noted that various changes and 
modifications will be apparent to those skilled in the art. 
Therefore, unless such changes and modifications depart from 

15 the scope of the present invention, they should be construed 

as being included therein. 

Industrial Applicability 

The recording medium of the present invention is 

20 useful for selling contents in a convenient way and at a low 

price, and therefore has industrial applicability in the 
music industry and the movie industry that produce and sell 
such a content. 

The digital data recording device and the digital 

25 data playback device of the present invention have industrial 

applicability in the manufacturing industry for a device that 
records the above content onto a recording medium, a device 
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that reproduces a content recorded on a recording medium, and 
a device that records a content from a recording medium onto 
another recording medium. 
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Claims 

1. A recording medium that stores: 

a first content; 

a second content that has been encrypted according to 
a first cryptosystem; and 

a header that has been encrypted according to a 
second cryptosystem and contains a first key information for 
decrypting the second content, the header being attached to 
the second content, 

wherein the second cryptosystem is characterized by 
using a second key information for decryption, the second key 
information being provided to a predetermined device in 
advance . 

2. The recording medium of Claim 1, 

wherein the predetermined device is capable of 
charging a fee, 

wherein the header includes 

use limitation information showing whether 
reproduction of the second content is permitted, a number of 
times reproduction is permitted, whether recording of the 
second content onto another recording medium is permitted, 
and a number of times recording is permitted and 

fee information which shows, when reproduction of the 
second content is permitted, a fee to be charged by the 
predetermined device for the reproduction of the second 

65 



WO 00/21087 PCT/JP99/05516 

13 content and when recording of the second content onto another 

14 recording medium is permitted, a fee to be charged by the 

15 predetermined device for the recording. 

1 3. The recording medium of Claim 1, 

2 wherein the predetermined device is capable of 

3 charging a fee, 

4 wherein the header includes 

5 use limitation information showing whether 

6 reproduction of the second content is permitted, a period 

7 during which reproduction is permitted, whether recording of 

8 the second content onto another medium is permitted, and a 

9 period during which recording is permitted and 

10 fee information which shows, when reproduction of the 

11 second content is permitted, a fee to be charged by the 

12 predetermined device for the reproduction of the second 

13 content and when recording of the second content onto another 

14 recording medium is permitted, a fee to be charged by the 

15 predetermined device for the recording. 

1 4. The recording medium of Claim 1, wherein the first 

2 content is encrypted using identification information unique 

3 to the recording medium. 

1 5. A digital data recording device that records digital 

2 data containing at least one content onto a recording medium, 

3 comprising: 
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storage means for storing at least one content to be 
recorded onto the recording mediums- 
selecting means for selecting a content whose 
reproduction and/or recording onto another recording medium 
need to be charged as a superdistribution content; 

first encrypting means for encrypting the selected 
superdistribution content according to a first cryptosystem 
to prevent the superdistribution content from being 
reproduced and from being recorded onto another recording 
medium before a fee has been charged; 

generating means for generating a superdistribution 
header containing key information to decrypt the encrypted 
superdistribution content ; 

second encrypting means for encrypting the generated 
superdistribution header according to a second cryptosystem 
that ensures higher security than the first cryptosystem and 
for attaching the encrypted superdistribution header to the 
encrypted superdistribution content; and 

recording means for recording the encrypted 
superdistribution content and the encrypted superdistribution 
header onto the recording medium, 

6. The digital data recording device of Claim 5, further 
comprising 

obtaining means for obtaining identification 
information unique to the recording medium from the recording 
medium and 
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6 third encrypting means for encrypting contents other 

7 than the superdistribution content using the obtained 

8 identification information before the other contents are 

9 recorded onto the recording medium. 

1 7. A digital data recording device that records digital data 

2 containing a superdistribution content from a first recording 

3 medium onto a second recording medium, the superdistribution 

4 content having been encrypted to prevent recording of the 

5 superdistribution content onto another recording medium 

6 before the recording is charged, the digital data recording 

7 device comprising: 

8 loading means for loading one of the first recording 

9 medium and the second medium into the digital data recording 

10 device; 

11 reading means for reading, when the loaded recording 

12 medium is the first recording medium, the superdistribution 

13 content from the loaded first recording medium; 

14 displaying means for displaying a fee for the 

15 recording to a user; 

16 receiving means for receiving an input from the user; 

17 decrypting means for decrypting, if the received 

18 input indicates that the user agrees to pay the fee, the read 

19 superdistribution content; 

20 charging means for charging the user the fee if the 

21 received input indicates that the user agrees to pay the fee; 

22 and 
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recording means for recording, when the loaded 
recording medium is the second recording medium, the 
decrypted superdistribution content onto the second 
recording medium. 

8. The digital data recording device of Claim 7, further 
comprising 

extracting means for extracting, if the loading means 
loads the second recording medium, identification information 
unique to the second recording medium from the second 
recording medium and 

re-encrypting means for re-encrypting the decrypted 
superdistribution content using the extracted identification 
information as an encryption key 

wherein the recording means records the re-encrypted 
superdistribution content onto the second recording medium 
whose identification information has been extracted. 

9. A playback device that reproduces digital data 
containing at least one superdistribution content written on 
a recording medium, the superdistribution content having been 
encrypted to prevent the superdistribution content from being 
reproduced before a fee is charged, the playback device 
comprising: 

loading means for loading the recording medium into 
the playback device; 

reading means for reading the superdistribution 
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10 content from the loaded recording medium; 

11 displaying means for displaying a reproduction fee to 

12 a user; 

13 receiving means for receiving an input from the user; 
decrypting means for decrypting, if the received 

input indicates that the user agrees to pay the reproduction 

16 fee, the read superdistribution content; 

17 charging means for charging the user the reproduction 
fee if the received input indicates that the user agrees to 



14 
15 



18 



19 pay the reproduction fee; and 



20 



10 
11 
12 
13 
14 



reproducing means for reproducing the decrypted 



21 superdistribution content. 



1 10. A content packaging device that produces a package 

2 containing a plurality of contents, comprising: 

3 encoding means for encoding, using different methods, 

4 a production to be distributed to generate a plurality of 

5 contents that each have a different reproduction quality; 

6 grading means for giving a grade to each of the 

7 generated contents according to a reproduction quality of the 

8 content; 

9 table storing means for storing a table containing a 
plurality of grades and a plurality of pairs, each pair 
consisting of an encryption key information and an encryption 
algorithm information and being associated with a different 
grade out of the grades given by the grading means; 

encrypting means for referring to the table and 
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15 encrypting each content given a grade using an encryption key 

16 and an encryption algorithm indicated by a pair associated 

17 with the grade; and 

18 packaging means for packaging the plurality of 

19 contents that have been encrypted to produce the package. 

1 11. The content packaging device of Claim 10, wherein the 

2 table is arranged so that grades which represent high 

3 reproduction quality are associated with pairs of information 

4 that represent highly secure encryption. 

1 12. A content packaging device that produces a package 

2 containing a plurality of contents, comprising: 

3 encoding means for encoding, using different methods, 

4 a production to be distributed so that a part of the 

5 production is encoded as a sample content and a remaining 

6 part of the production as a main content; 

7 grading means for giving a predetermined grade to the 

8 sample content and a higher grade to the main content; 

9 table storing means for storing a table containing 

10 the predetermined grade, the higher grade, and two pairs, 

11 each pair consisting of an encryption key information and an 

12 encryption algorithm information, one pair being associated 

13 with the predetermined grade, another pair being associated 

14 with the higher grade; 

15 encrypting means for encrypting, after referring to 

16 the table, the graded sample content using an encryption key 



WO 00/21087 PCT/JP99/05516 

17 and an encryption algorithm indicated by the pair and 

18 encrypting the graded main content using an encryption key 

19 and an encryption algorithm indicated by the other pair; and 

20 packaging means for packaging the encrypted sample 

21 content and the encrypted main content to produce the 

22 package . 

1 13. A content playback device that reproduces a content 

2 extracted from a package, comprising: 

3 evaluation means for evaluating a hardware 

4 performance of the content playback device to calculate a 

5 grade indicating the hardware performance ; 

6 table storing means for storing a table containing a 

7 plurality of grades and a plurality of pairs, each pair 

8 consisting of a decryption key information and a decryption 

9 algorithm information and being associated with a different 

10 grade out of the grades calculated by the evaluation means; 

11 obtaining means for obtaining from a periphery of the 

12 content playback device, the package containing a plurality 

13 of contents that have each been encrypted using a different 

14 cryptosystem; and 

1 5 decrypting means for referring to the table to select 

16 a pair associated with the calculated grade, extracting from 

17 the obtained package the content that can be decrypted using 

18 a decryption key and a decryption algorithm indicated by the 

19 selected pair, and decrypting the extracted content. 
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1 14. A content playback device that reproduces either a) a 

2 sample content or b) a main content that are contained in a 

3 package, wherein the sample content has been generated by 

4 encoding and encrypting a part of a production to be 

5 distributed and the main content has been generated by 

6 encoding and encrypting a remaining part of the production, 

7 wherein the sample content is encrypted using an encryption 

8 key and an encryption algorithm that provide lower security 

9 than an encryption key and an encryption algorithm used to 

10 encrypt the main content, the content playback device 

11 comprising: 

12 evaluation means for evaluating a hardware 

13 performance of the content playback device to calculate a 

14 grade indicating the hardware performance, the calculated 

15 grade being either a low grade or a high grade; 

16 table storing means for storing a table associating 

17 the low grade with a decryption key and a decryption 

18 algorithm that are capable of decrypting the sample content, 

19 and associating the high grade with a decryption key and a 

20 decryption algorithm that are capable of decrypting the main 

21 content; 

22 obtaining means for obtaining from a periphery of the 

23 content playback device, the package containing the sample 

24 content and the main content; and 

25 decrypting means for referring to the table to select 

26 the decryption key and decryption algorithm that are 

27 associated with the calculated grade, extracting from the 
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28 obtained package either the sample content or the main 

29 content that can be decrypted using the selected decryption 

30 key and decryption algorithm, and decrypting the extracted 

31 content. 

1 15. A recording medium that stores 

2 a sample content encrypted using a first encryption 

3 key and a first encryption algorithm and 

4 a retail content that has a reproduction quality 

5 higher than the sample content and is encrypted using a 

6 second encryption key and a second encryption algorithm that 

7 ensure higher security than the first encryption key and the 

8 first encryption algorithm. 

1 16. A recording medium that stores 

2 a sample content that is generated by encoding a part 

3 of a production to be distributed and by encrypting the 

4 encoded part with a first encryption key and a first 

5 encryption algorithm and 

6 a main content that is generated by encoding a 

7 remaining part of the production and by encrypting the 

8 encoded remaining part with a second encryption key and a 

9 second encryption algorithm that ensure higher security than 
10 the first encryption key and the first encryption algorithm. 

1 17. A system comprising a content packaging device that 

2 produces a package containing a plurality of contents and at 
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3 least one content playback device that reproduces a content 

4 extracted from the package, 

5 wherein the content packaging device includes: 

6 encoding means for encoding, using different methods, 

7 a production to be distributed to generate a plurality of 

8 contents that each have a different reproduction quality; 

9 grading means for giving a grade to each of the 

10 generated contents according to a reproduction quality of the 

11 content; 

12 first table storing means for storing a first table 

13 containing a plurality of grades and a plurality of pairs, 

14 each pair consisting of an encryption key information and an 

15 encryption algorithm information and being associated with a 

16 different grade out of the grades given by the grading means; 

17 encrypting means for referring to the first table and 

18 encrypting each content given a grade using an encryption key 

19 and an encryption algorithm indicated by a pair associated 

20 with the grade; and 

21 packaging means for packaging the plurality of 

22 contents that have been encrypted to produce the package, 

23 wherein each content playback device includes: 

24 evaluation means for evaluating a hardware 

25 performance of the content playback device to calculate a 

26 grade indicating the hardware performance; 

27 second table storing means for storing a second table 

28 containing a plurality of grades and a plurality of pairs, 

29 each pair consisting of a decryption key information and a 
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decryption algorithm information and being associated with a 
different grade out of the grades calculated by the 
evaluation means; 

obtaining means for obtaining from a periphery of the 
content playback device, the package packaged by the 
packaging means; and 

decrypting means for referring to the second table to 
select a pair associated with the calculated grade, 
extracting from the obtained package the content that can be 
decrypted using a* decryption key and a decryption algorithm 
indicated by the selected pair, and decrypting the extracted 
content . 

18. A computer-readable recording medium that stores a 
recording program to have a computer record digital data 
containing at least one content onto a writeable medium, 

wherein the computer includes a storing unit for 
storing at least one content to be recorded onto the 
writeable medium and 

wherein the recording program includes: 

a selecting step for selecting a content whose 
reproduction and/or recording onto a writeable medium need to 
be charged as a superdistribution content; 

a first encrypting step for encrypting the selected 
superdistribution content according to a first cryptosystem 
to prevent the superdistribution content from being 
reproduced and from being recorded onto a writeable medium 
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15 before a fee has been charged; 

16* a generating step for generating a superdistribution 

17 header containing key information to decrypt the encrypted 

18 superdistribution content; 

19 a second encrypting step for encrypting the generated 

20 superdistribution header according to a second cryptosystem 

21 that ensures higher security than the first cryptosystem and 

22 for attaching the encrypted superdistribution header to the 

23 encrypted superdistribution content; and 

24 a recording step for recording the encrypted 

25 superdistribution content and the encrypted superdistribution 

26 header onto the writeable medium. 

1 19. A computer-readable recording medium that stores a 

2 recording program to have a computer record digital data 

3 containing a superdistribution content from a first recording 

4 medium onto a second recording medium, the superdistribution 

5 content having been encrypted to prevent recording of the 

6 superdistribution content onto another recording medium 

7 before the recording is charged, 

8 wherein the computer includes a loading unit for 

9 loading one of the first recording medium and the second 

10 medium and 

11 wherein the recording program includes: 

12 a reading step for reading, when the loaded recording 

13 medium is the first recording medium, the superdistribution 

14 content from the loaded first recording medium; 
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15 



a displaying step for displaying a fee for the 

16 recording to a user;' 

17 a receiving step for receiving an input from the 

18 user; 

a decrypting step for decrypting, if the received 
input indicates that the user agrees to pay the fee, the read 

21 superdistribution content; 

22 a charging step for charging the user the fee if the 
received input indicates that the user agrees to pay the fee; 



19 
20 



23 



24 and 

25 a recording step for recording, when the loaded 

26 recording medium is the second recording medium, the 

27 decrypted superdistribution content onto the second recording 

28 medium. 



1 20. A computer-readable recording medium that stores a 

2 playback program to have a computer reproduce digital data 

3 containing at least one superdistribution content written on 

4 another recording medium, the superdistribution content 

5 having been encrypted to prevent the superdistribution 

6 content from being reproduced before a fee is charged, 

7 wherein the computer includes a loading unit for 

8 loading the another recording medium and 

9 wherein the playback program includes: 
a reading step for reading the superdistribution 

content from the loaded recording medium; 

a displaying step for displaying a reproduction fee 
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13 to a user; 

14 a receiving step for receiving an input from the 

15 user; 

16 a decrypting step for decrypting, if the received 

n input indicates that the user agrees to pay the reproduction 

18 fee, the read superdistribution content; 

19 a charging step for charging the user the 

20 reproduction fee if the received input indicates that the 

21 user agrees to pay the reproduction fee; and 

22 a reproducing step for reproducing the decrypted 

23 superdistribution content. 

1 21. A computer-readable recording medium that stores a 

2 content packaging program to have a computer produce a 

3 package containing a plurality of contents, 

4 wherein the computer includes a storing unit for 

5 storing a table containing a plurality of grades and a 

6 plurality of pairs, each pair consisting of an encryption key 

7 information and an encryption algorithm information and being 

8 associated with a different grade and 

9 wherein the content packaging program includes: 

10 an encoding step for encoding, using different 

11 methods, a production to be distributed to generate a 

12 plurality of contents that each have a different reproduction 

13 quality; 

14 a grading step for giving a grade to each of the 

15 generated contents according to a reproduction quality of the 
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16 content; 

IV an encrypting step for referring to the table and 

18 encrypting each content given a grade using an encryption key 

19 and an encryption algorithm indicated by a pair associated 

20 with the grade; and 

21 a packaging step for packaging the plurality of 

22 contents that have been encrypted to produce the package. 

1 22. A computer-readable recording medium that stores a 

2 content packaging program to have a computer produce a 

3 package containing a plurality of contents, 

4 wherein the computer includes a storage unit for 

5 storing a table containing a predetermined grade, a higher 

6 grade, and two pairs, each pair consisting of an encryption 

7 key information and an encryption algorithm information, one 

8 pair being associated with the predetermined grade, another 

9 pair being associated with the higher grade and 

10 wherein the content packaging program includes: 

11 an encoding step for encoding, using different 

12 methods, a production to be distributed so that a part of the 

13 production is encoded as a sample content and a remaining 

14 part of the production as a main content; 

15 a grading step, for giving the predetermined grade to 

16 the sample content and the higher grade to the main content; 

17 an encrypting step for encrypting, after referring to 

18 the table, the graded sample content using an encryption key 

19 and an encryption algorithm indicated by the pair and 
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20 encrypting the graded main content using an encryption key 

21 and an encryption algorithm indicated by the other pair; and 

22 a packaging step for packaging the encrypted sample 

23 content and the encrypted main content to produce the 

24 package. 

1 23. A computer-readable recording medium that stores a 

2 playback program to have a computer reproduce a content 

3 extracted from a package, 

4 wherein the computer includes a storing unit for 

5 storing a table containing a plurality of grades and a 

6 plurality of pairs, each pair consisting of a decryption key 

7 information and a decryption algorithm information and being 

8 associated with a different grade and 

9 wherein the playback program includes: 

10 an evaluation step for evaluating a hardware 

11 performance of the computer to calculate a grade indicating 

12 the hardware performance; 

13 an obtaining step for obtaining from a periphery of 

14 the computer, the package containing a plurality of contents 

15 that have each been encrypted using a different cryptosystem; 

16 and 

17 a decrypting step for referring to the table to 

18 select a pair associated with the calculated grade, 

19 extracting from the obtained package the content that can be 

20 decrypted using a decryption key and a decryption algorithm 

21 indicated by the selected pair, and decrypting the extracted 
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22 content. 

1 24 . A recording method used by a computer to record digital 

2 data containing at least one content onto a recording medium, 

3 the computer including a storing unit for storing at least 

4 one content to be recorded onto the recording medium, 

5 wherein the recording method includes: 

6 a selecting step for selecting a content whose 

7 reproduction and/or recording onto a recording medium need to 

8 be charged as a superdistribution content; 

9 a first encrypting step for encrypting the selected 

10 superdistribution content according to a first cryptosystem 

11 to prevent the superdistribution content from being 

12 reproduced and from being recorded onto a recording medium 

13 before a fee has been charged; 

14 a generating step for generating a superdistribution 

15 header containing key information to decrypt the encrypted 

16 superdistribution content; 

1 7 a second encrypting step for encrypting the generated 

18 superdistribution header according to a second cryptosystem 

19 that ensures higher security than the first cryptosystem and 

20 for attaching the encrypted superdistribution header to the 

21 encrypted superdistribution content; and 

22 a recording step for recording the encrypted 

23 superdistribution content and the encrypted superdistribution 

24 header onto the recording medium. 
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1 25. A recording method used by a computer to record digital 

2 data containing a superdistribution content from a first 

3 recording medium onto a second recording medium, the 

4 superdistribution content having been encrypted to prevent 

5 recording of the superdistribution content onto another 

6 recording medium before the recording is charged, wherein the 

7 computer includes a loading unit for loading one of the first 

8 recording medium and the second medium, 

9 wherein the recording method includes: 

10 a reading step for reading, when the loaded recording 

11 medium is the first recording medium, the superdistribution 

12 content from the loaded first recording medium; 

13 a displaying step for displaying a fee for the 

14 recording to a user; 

15 a receiving step for receiving an input from the 

16 user; 

17 a decrypting step for decrypting, if the received 

18 input indicates that the user agrees to pay the fee, the read 

19 superdistribution content; 

20 a charging step for charging the user the fee if the 

21 received input indicates that the user agrees to pay the fee; 

22 and 

23 a recording step for recording, when the loaded 

24 recording medium is the second recording medium, the 

25 decrypted superdistribution content onto the second recording 

26 medium. 

( 
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1 26. A playback method used by a computer to reproduce 

2 digital data containing at least one superdistribution 

3 content written on a recording medium, the superdistribution 

4 content having been encrypted to prevent the 

5 superdistribution content from being reproduced before a fee 

6 is charged, the computer including a loading unit for loading 

7 the recording medium, 

8 wherein the playback method includes: 

9 a reading step for reading the superdistribution 

10 content from the loaded recording medium; 

11 a displaying step for displaying a reproduction fee 

12 to a user; 

13 a receiving step for receiving an input from the 

14 user; 

15 a decrypting step for decrypting, if the received 

16 input indicates that the user agrees to pay the reproduction 

17 fee, the read superdistribution content; 

18 a charging step for charging the user the 

19 reproduction fee if the received input indicates that the 

20 user agrees to pay the reproduction fee; and 

21 a reproducing step for reproducing the decrypted 

22 superdistribution content . 

1 27. A content packaging method used by a computer to produce 

2 a package containing a plurality of contents, the computer 

3 including a storing unit for storing a table containing a 

4 plurality of grades and a plurality of pairs, each pair 
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5 consisting of an encryption key information and an encryption 

6 algorithm information and being associated with a different 

7 grade, 

8 wherein the content packaging method includes: 

9 an encoding step for encoding, using different 

10 methods, a production to be distributed to generate a 

11 plurality of contents that each have a different reproduction 

12 quality; 

13 a grading step for giving a grade to each of the 

14 generated contents according to a reproduction quality of the 

15 content; 

16 an encrypting step for referring to the table and 

17 encrypting each content given a grade using an encryption key 

18 and an encryption algorithm indicated by a pair associated 

19 with the grade; and 

20 a packaging step for packaging the plurality of 

21 contents that have been encrypted to produce the package. 

1 28. A content packaging method used by a computer to produce 

2 a package containing a plurality of contents, the computer 

3 including a storage unit for storing a table containing a 

4 predetermined grade, a higher grade, and two pairs, each pair 

5 consisting of an encryption key information and an encryption 

6 algorithm information, one pair being associated with the 

7 predetermined grade, another pair being associated with the 

8 higher grade, 

9 wherein the content packaging method includes: 
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an encoding step for encoding, using different 
methods, a production to be distributed so that a part of the 
production is encoded as a sample content and a remaining 



13 part of the production as a main content; 

14 a grading step for giving the predetermined grade to 

15 the sample content and the higher grade to the main content; 

16 an encrypting step for encrypting, after referring to 

17 the table, the graded sample content using an encryption key 

18 and an encryption algorithm indicated by the pair and 

19 encrypting the graded main content using an encryption key 
and an encryption algorithm indicated by the other pair; and 

a packaging step for packaging the encrypted sample 
content and the encrypted main content to produce the 



23 package, 



1 29. A content playback method used by a computer to 

2 reproduce a content extracted from a package, the computer 

3 including a storing unit for storing a table containing a 

4 plurality of grades and a plurality of pairs, each pair 

5 consisting of a decryption key information and a decryption 

6 algorithm information and being associated with a different 

7 grade, 

8 wherein the content playback method includes: 

9 an evaluation step for evaluating a hardware 
^performance of the computer to calculate a grade indicating 



11 the hardware performance; 



an obtaining step for obtaining from a periphery of 
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13 the computer, the package containing a plurality of contents 

14 that have each been encrypted using a different cryptosystem; 

15 and 

16 a decrypting step for referring to the table to 

17 select a pair associated with the calculated grade, 

18 extracting from the obtained package the content that can be 

19 decrypted using a decryption key and a decryption algorithm 

20 indicated by the selected pair, and decrypting the extracted 

21 content. 
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